Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 12 Feb 2016 16:49:45 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality
Message-ID:  <bug-207087-8-HlmZ9KRapO@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-207087-8@https.bugs.freebsd.org/bugzilla/>
References:  <bug-207087-8@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D207087

--- Comment #17 from g_amanakis@yahoo.com ---
Created attachment 166901
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D166901&action=
=3Dedit
ipfw.txt

This is the simplified IPFW ruleset I am using. IPSEC is turned off in kern=
el
compilation. I will use only this from now on in order to have a common bas=
is.
xxx.yyy and aaa.bbb are local networks. All the local clients are on the
xxx.yyy network.

With this I am getting a mixed behaviour. For example my laptop client
(Thinkpad X230 running Archlinux) exhibits the symptoms on some sites (most
notably www.gutefrage.net) when the gateway runs the r295545 kernel (commen=
ting
out ip_tryforward() resolves it). However when the gateway runs the r295264
kernel with net.inet.ip.fastforwarding=3D1 the archlinux client doesn't exh=
ibit
the symptoms anymore.=20

I will test this on HEAD. Is there any special tcpdump command you 'd like =
me
to run? I will try and get simultaneous dumps from the interfaces involved.

--=20
You are receiving this mail because:
You are on the CC list for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-207087-8-HlmZ9KRapO>